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Amendments to the Claims 



The following is a complete listing of the claims, which replaces all previous versions and 
listings of the claims. 
1 . (Cancelled) 
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2. (Currently Amended) A method for generating a group digital signature as rooitod in 
ekHm-4-wherein each of a group of individuals m »v sign a message M to create a grow 
digital signature S. wherein M corresp onds to a number representative of a message. 
0£M S/>-l , Tiisa cnmnnsite number formed from the product of a number k of 
distinct random prime factors j», • p, • ■ . ■ • p fr - k is an inteeer greater than 2, 
and S ■ M u (modn) , r.mnprjsina the steps of: 

a first individual in a group per fo rming a first partial digital signature BUPtask on a 
message M using a first individual private kev t o produce a first partial digital signature 

at least a second individual in said group perfo rming a second partial digital 

ai pnanirft «iihtask on said message M using a seco nd individual private kev to produce a 

second partial digital signature and 

combining said partial digital signatur e results including said results Si and S» to 
produce, the group digital signature S corresp onding to said message M: 

wherein said step of combining said results associated with said first and second 

partial digital signatures includes: 

combining said results in accordance with a Chinese Remainder Algorithm. 
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3 . (Currently Amended) A method for generating a group digital signatur tMis rooitcd in 
ri^ wherein each of a group of i n dividuals may sign a message M to create a group 
digital signature S. wherein M corresponds to a number representativ e of a message, 
0<MSw-l , "™» co m posite numb er formed from the product of a number H gf 
distinct random crime motors p, ♦ p, ♦ . . . • k is an inteaer greater than 2, 
^ <? - KC<mnA n\ _ comprising the stepa of; 

a first individual in a group performing a first partial &SM signature subtask on a 
n^ap e M using a first individual priv a te kev to produce a first partial digital signature 

at least a second individual in s aid group performing a second partial digital 
ft i r »t,ire *nht a *k on said m essage M using a second individual private kev tO produce a 
^nnd partial digit al signature Si: and 

rnmhining said p a rtial digital signature results including, said results S | and S ? to 
produce the g rou p digital signature S corresponding to said message M: 
wherein each of said individual private keys includes, 

an associated individual modulus m that is a number formed as a product of one or 
more of said k prime factors of said group modulus n, and 

an associated individual private exponent d» that is determined based on a selected 
public group exponent e, and also based on the prime factors of said associated individual 
modulus n\. 
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4. (Original) A method for generating a group digital signature as recited in claim 3 wherein 
each of said individual private exponents di is determined as a number congruent to the 
inverse of said public group exponent e s modulo the Euler Totient function of said 
associated individual modulus ni. 
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5 . (Currently Amended) A method for generating a group digital signature ao r e oit e d in 

wherein each of a gronn of frdividi 1fl |s mav «jgn a message M to create a group 
digital signature S. wherein M corresponds to a numb er representative of a message. 
0<SM<n-l-nisa composite number f ormed fro m the produc t 0 f a number k of 

distinct random prime factors p t • p 3 • . . ■ • p k JUS-ffll integ er areatgr than 2, 

i 

andS b M* (mod ii) . comprising the steps of: 

a first individual in a group performing a first partial digital signature gubtask oils 
massage M using a first individual private kev to p rodu ce a firs t partial jdigitaj signature 

j" 

Si; | 

at least a second individual in said gm un performing a second partial digital 

sifmature subtask on said message M using a s econd individual privatejkev to producer 
second partial digital signature S 2 ; and 

combining said partial digital signature re sults including said results Si and S a Jfl 
produce the group digital signature S corresponding to said message M: 

wherein the first individual is assigned a first number mi of the k prime factors of 

said group modulus n and the second individual is assigned a second number m2 of the k 
prime factors of said group modulus n, and wherein: 

said first individual private key includes, 

an associated individual modulus ni that is determined as the product of a number 
mi of distinct prime factors of said group modulus n, and 
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an associated individual private exponent di that is determined based on a selected 
public key exponent e and based on the mi prime factors of said associated individual 
modulus in accordance with 

d x ■= e' x mod( Yl ( P J 1 )1 » wberein p t . . . p m i represent the first number mi of said 
distinct prime factors. 

6; (Original) A method for generating a group digital signature as recited in claim 3 wherein 
said first partial digital signature Si is generated based on the relationship 
S { = M J ' (mod n x ) . 
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7, (Currently Amended) A method for generating a group digital signatur e as rooitod in 

wherein each of a croup of individuals r nav sign a message M to create a group 
digital signature S. wherein M corresponds to a number representative of a message, 
0£AfSa-l i "teft composite number formed from the product of a number k of 
distinct random prime factors P t « • . . ■ * P t ■ k is an integer greater than 2, 
aijH ,<? = M'f rtiadfA . comprising the steps of: 

a first individual in a group performing a first partial digital signature subtask on 6 
message M using a first individual private kev to produ ce a first partial digital signature 

at least a second i ndividual in said group performing a second partial digital 
si gnature subtask on said message M usi ng a second individual private key to produce ft 
Mnnnd partial digital signature S->: and 

combining said partial digital signature re sults including said results S. and S-> to 
produce the group digital signature S cor responding to said message M; 

wherein said first individual private key is created based on associated prime 

factors p a and p b of the group modulus n, said first individual private key including, 

an individual modulus ni that is a composite number formed as the product 
P B ♦Ft of said associated primes, and 

an associated individual private exponent d\ that is determined based on a selected 
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public key exponent e and said associated primes p 4 and p b in accordance with 
rf, m e"' mod(( p a -l)(p b -1)) - 

8 . (Original) A method for generating a group digital signature as recited in claim 7 wherein 
said first partial digital signature Si is generated based on the relationship, 

5, -Af'Cmod^), ' 

9. (Original) A method for generating a group digital signature as recited in claim 2 wherein 
the group comprises z individuals whose private key moduli ni are relatively prime, 
wherein said step of combining results of said sub-tasks is performed in accordance with 
the relations 

Y, ■ Y M + ((S, - Y,_, Kwf 1 mod «, ) mod n, ) • w, mod n , 

wherein 2 < i < z, and 

S - Y k , Yi = S,, and w, =Yl n j ■ 
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10. (Original) A method for generating a group digital signature as recited in claim 2 wherein 
the group comprises z individuals whose private key moduli n\ are relatively prime, 
wherein said step of combining results of said sub-tasks is performed in accordance with 
the relations 

• 3 

S l( W l m ° d m ° d n > 

wherein 
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1 1 , (Original) A method of creating and assigning individual private keys to each member of 
at least one group of individuals, wherein the individuals in each group may, use their 
assigned keys to sign a message M to collectively create a group digital signature S 
associated with an entity that includes all of the groups, wherein M corresponds to a 
number representative of a message, 0 < M < n-1, n is a composite number formed from 
the product of a total number k of distinct random primes p ] • p 2 • . . - • p k , k is an integer 
greater than 2, and S m M * (mod n) > and wherein each such group of individuals 
collectively control all of the primes, but wherein no single one of the individuals, 
controls all of the prime factors p l • /> a • • , . • p k ; , comprising: 

assigning at least one of the total number k of prime numbers A • Pz • • • ♦ • />* to 
each of a plurality of members of each of at least one group > wherein all of the prime 
numbers assigned to the individuals within each group are distinct; 

defining a unique individual modulus associated with each of the individuals 
formed as the product of the prime numbers assigned to the individual; and 

defining a unique individual private key for each of the individuals based on the 
associated individual modulus formed for the individual; 

whereby each of the individual private keys may be used to create an associated 
individual partial digital signature, wherein the individual partial digital signatures of the 
members of a group may be combined to form the group digital signature S, and wherein 
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at least one of the partial digital signatures cannot be combined across different groups to 
form the group digital signature S, 

12. (Original) A method of creating and assigning individual private keys as recited in claim 
10 wherein the keys are created and assigned in accordance with a symmetric distribution 
of the k prime factors of n> wherein each of the individual members of a group is assigned 
an individual private key based on a modulus formed as a product of m distinct prime 
factors, and wherein m < k, 

13. (Original) A method of creating and assigning partial digital signature keys as recited in 
claim 1 1 wherein the number of combinations of the k prime factors taken m at a time 
dictates the number of distinct individual private keys that may be created based on the 
total number k prime factors, and wherein the number of combinations of k prime fectors 
taken m at a time is expressed in accordance with 

A J k ) = * l 

and wherein said individual private keys are organized into 
g = Alz=A»mi'k groups comprising z = k I m members in each group. 
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14. (Original) A method of creating and assigning individual private keys as recited in claim 
10 wherein the keys are created and assigned in accordance with an asymmetric 
distribution of the k prime factors of n, wherein at least one of the individual members of 
a group is assigned an individual private key based on a modulus formed as a product of 
mi distinct prime factors, and wherein at least one other member of said group are 
assigned individual private keys each based on a modulus formed as a product of m 2 
distinct prime factors, wherein m, < m 1 < k . 

1 5. (Original) A method of creating and assigning individual private keys as recited in claim 
1 3 wherein the keys are created and assigned in accordance with an asymmetric 
distribution of the k prime factors of n, wherein at least one private key is assigned across 
more than one group. 

16. (Cancelled) 

17. (Original) An apparatus for generating a group digital signature as recited in claim 14, 
wherein the secure key generation facility and secure group signature combining entity 
are combined within a common security boundary, 
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18, (Original) An apparatus for generating a group digital signature as recited in claim 14, 
including: 

means for transferring individual private keys generated by the secure key 
generation facility into secure tokens for issuance to the assigned individual users of said 
private signing keys, and 

means for securely transferring associated secret group combining parameters 
from the secure key generation facility to the secure combining entity, 

1 9. (Original) An apparatus as recited in claim 14 wherein each of said tokens is a smart 
card. 
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